Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.0.0->5.1.05.0.0->5.1.028.0.4->28.5.10.22.0->0.29.12.35.0->2.40.0v3.4.0->v3.6.0v3.10.0->v3.11.19.0.203->9.0.3059.0.203->9.0.3059.0.203->9.0.3059.0.203-noble->9.0.305-nobleRelease Notes
cake-build/cake (cake.tool)
v5.1.0Compare Source
Feature
moby/moby (docker)
v28.5.1Compare Source
28.5.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
Deprecations
ParentandDockerVersionfields. moby/moby#51105Config.DockerVersionfield. moby/moby#51110v28.5.0Compare Source
28.5.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
docker infofor broken symlinks in CLI-plugin directories. docker/cli#6476statson empty eventActor.ID. docker/cli#6471Packaging updates
Networking
endpoint_countfrom the data store. moby/moby#51064API
KernelMemoryTCP). moby/moby#51067GET containers/{name}/checkpointsreturningnullinstead of empty JSON array when there are no checkpoints. moby/moby#51052Go SDK
WithUserAgentoption. docker/cli#6477Deprecations
DockerCli.Apply. This method is no longer used and will be removed in the next release if there are no remaining uses. docker/cli#6497DockerCli.ContentTrustEnabled. This method is no longer used and will be removed in the next release. docker/cli#6495DockerCli.DefaultVersion. This method is no longer used and will be removed in the next release. docker/cli#6491ResolveDefaultContextutility. docker/cli#6529WithContentTrustFromEnv,WithContentTrustoptions. These options were used internally, and will be removed in the next release.. docker/cli#6489IsNotFound(). docker/cli#6514v28.4.0Compare Source
28.4.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
GODEBUGenvironment variable when the key-value pair ("GODEBUG":"...") exists inside the docker context metadata. docker/cli#6399Bug fixes and enhancements
docker pullanddocker image pull. docker/cli#6420docker pushif the client did not send anX-Registry-Authheader. moby/moby#50738docker historyfailing withsnapshot X does not existwhen calling on a non-native image that was built locally. moby/moby#50875docker image pruneto emit correctuntaganddeleteevents and list only the deleted images root digests instead of every blob. moby/moby#50837docker pushanddocker pullafter a failure caused by missing authentication. docker/cli#6256Packaging updates
runcto v1.3.0. moby/moby#50699Networking
API
AuthConfig.Emailfield. moby/moby#50797Go SDK
Deprecations
--tlscacert,--tlscert, and--tlskeycommand-line flags. docker/cli#6291DOCKER_KEEP_DEPRECATED_LEGACY_LINKS_ENV_VARS) as deprecated in v28.4 and set for removal in v30.0. docker/cli#6309NetworkSettingsBase.Bridge, structNetworkSettingsBase, all the fields ofDefaultNetworkSettings, and structDefaultNetworkSettings. moby/moby#50839build.CacheDiskUsage,container.DiskUsage,images.DiskUsageandvolumes.DiskUsageare now deprecated and will be removed in the next major release. moby/moby#50768ReexecEnvvar. docker/cli#6411CommandAnnotationPlugin,CommandAnnotationPluginVendor,CommandAnnotationPluginVersion,CommandAnnotationPluginInvalid,CommandAnnotationPluginCommandPath) in favor of their equivalent incli-plugins/manager/metadata. docker/cli#6298NamePrefix,MetadataSubcommandName,HookSubcommandName,Metadata,ReexecEnvvar) in favor of their equivalent incli-plugins/manager/metadata. docker/cli#6269Candidateinterface, which was only for internal use. docker/cli#6269NewPluginErrorfunction, which was only for internal use. docker/cli#6269ResourceAttributesEnvvarconst. docker/cli#6269NewBuilderCommandandNewBakeStubCommand. These functions will be removed in the next release. docker/cli#6312NewPruneCommand. docker/cli#6343NewCheckpointCommand. This function will be removed in the next release. docker/cli#6312NewFormat,FormatWrite. docker/cli#6341NoComplete. docker/cli#6405ValidArgsFn. docker/cli#6259NewConfigCommand. This function will be removed in the next release. docker/cli#6312NewFormat,FormatWrite,InspectFormatWrite. docker/cli#6341RunConfigCreate,CreateOptions,RunConfigInspect,InspectOptions,RunConfigList,ListOptions,RunConfigRemove, andRemoveOptions. docker/cli#6369NewBuildCommand,NewPullCommand,NewPushCommand,NewImagesCommand,NewImageCommand,NewHistoryCommand,NewImportCommand,NewLoadCommand,NewRemoveCommand,NewSaveCommand,NewTagCommand,NewPruneCommand. These functions will be removed in the next release. docker/cli#6312NewDiffFormat,DiffFormatWrite. These functions were only used internally and will be removed in the next release. docker/cli#6341NewRunCommand,NewExecCommand,NewPsCommand,NewContainerCommand,NewAttachCommand,NewCommitCommand,NewCopyCommand,NewCreateCommand,NewDiffCommand,NewExportCommand,NewKillCommand,NewLogsCommand,NewPauseCommand,NewPortCommand,NewRenameCommand,NewRestartCommand,NewRmCommand,NewStartCommand,NewStatsCommand,NewStopCommand,NewTopCommand,NewUnpauseCommand,NewUpdateCommand,NewWaitCommand,NewPruneCommand. These functions will be removed in the next release. docker/cli#6312NewContextCommand. This function will be removed in the next release. docker/cli#6312RunCreateandCreateOptions. docker/cli#6403RunExportandExportOptions. docker/cli#6403RunImport. docker/cli#6403RunRemoveandRemoveOptions. docker/cli#6403RunUpdateandUpdateOptions. docker/cli#6403RunUse. docker/cli#6403AuthResolverutility. docker/cli#6357NewHistoryFormat,HistoryWrite. docker/cli#6341, docker/cli#6341NewManifestCommand. This functions will be removed in the next release. docker/cli#6312NewFormat,FormatWrite. docker/cli#6341NewNetworkCommand. These functions will be removed in the next release. docker/cli#6312NewFormat,FormatWrite,InspectFormatWrite. docker/cli#6341NewNodeCommand. This functions will be removed in the next release. docker/cli#6312NewFormat,FormatWrite. docker/cli#6341NewPluginCommand. This function will be removed in the next release. docker/cli#6312NewLoginCommand,NewLogoutCommand,NewSearchCommand. These functions will be removed in the next release. docker/cli#6312NewSearchFormat,SearchWrite. docker/cli#6341OauthLoginEscapeHatchEnvVarconst. docker/cli#6413NewFormat,FormatWrite,InspectFormatWrite. docker/cli#6341NewSecretCommand. This functions will be removed in the next release. docker/cli#6312NewFormat,InspectFormatWrite. docker/cli#6341NewServiceCommand. This function will be removed in the next release. docker/cli#6312NewStackCommand. This function will be removed in the next release. docker/cli#6312RunList,RunServices. docker/cli#6391NewSwarmCommand. This function will be removed in the next release. docker/cli#6312NewVersionCommand,NewInfoCommand,NewSystemCommand,NewEventsCommand,NewInspectCommand. These functions will be removed in the next release. docker/cli#6312NewTaskFormat,FormatWrite. docker/cli#6341NewTrustCommand. This function will be removed in the next release. docker/cli#6312SignedTagInfo,SignerInfo,NewTrustTagFormat,NewSignerInfoFormat,TagWrite,SignerInfoWrite. docker/cli#6341NewVolumeCommand,NewPruneCommand. These functions will be removed in the next release. docker/cli#6312AddTrustSigningFlags,AddTrustVerificationFlags, andAddPlatformFlagutilities, which were only used internally. docker/cli#6311ConfigureAuthutility. docker/cli#6257CopyToFileutility. docker/cli#6257AuthConfig.Emailfield. docker/cli#6392VisitAll,DisableFlagsInUseLineutilities. These utilities were only used internally and will be removed in the next release. docker/cli#6276HasCompletionArgutility. This utility was only used internally. docker/cli#6276cli/command.RegistryAuthenticationPrivilegedFunc. docker/cli#6256NewNamedListOptsRef,NewNamedMapOpts,NamedListOpts,NamedMapOpts, andNamedOption. These types and functions are no longer used and will be removed in the next release. docker/cli#6292ParseEnvFilein favour ofkvfile.Parse. docker/cli#6381QuotedString. This utility is no longer used, and will be removed in the next release. docker/cli#6275ValidateHostutility. This function is no longer used, and will be removed in the next release. docker/cli#6280JSONMessage.From,JSONMessage.Time, andJSONMessage.TimeNanofields, as they are no longer returned by the API for progress messages. Use theevents.Messagetype instead to unmarshal the/eventsresponse. moby/moby#50762v28.3.3Compare Source
28.3.3
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Security
This release fixes an issue where, after a firewalld reload, published container ports could be accessed directly from the local network, even when they were intended to be accessible only via a loopback address. CVE-2025-54388 / GHSA-x4rx-4gw3-53p4 / moby/moby#50506.
Packaging updates
Go SDK
TrunateID()utility as alternative forgithub.com/docker/docker/pkg/stringid.TrunateID(). docker/cli#6180v28.3.2: 28.3.2Compare Source
28.3.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
--use-api-socketnot working correctly when targeting a remote daemon. docker/cli#6157DOCKER_AUTH_CONFIGis set duringdocker loginanddocker logout. docker/cli#6163Packaging updates
v28.3.1: 28.3.1Compare Source
28.3.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Packaging updates
models:key in Docker Compose. docker/docker-ce-packaging#1222v28.3.0: 28.3.0Compare Source
28.3.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
docker run --gpus. moby/moby#49952DOCKER_AUTH_CONFIGas a credential store. docker/cli#6008Bug fixes and enhancements
docker image inspect inspectomitting empty fields. moby/moby#50135docker images --treenot marking images as in-use when the containerd image store is disabled. docker/cli#6140docker pull/pushhang in non-interactive when authentication is required caused by prompting for login credentials. docker/cli#6141docker pullwould show Docker Hub-specific hints when logging in on other registries. docker/cli#6135docker removecommand that was accidentally introduced in Docker 23.0. docker/cli#6144dockerd --validateand improve error messages for invalid mirrors. moby/moby#50240dockerd-rootless-setuptool.sh: Fix the script from silently returning with no error message when subuid/subgid system requirements are not satisfied. moby/moby#50059docker pushnot creating a tag on the remote repository. moby/moby#50199docker pull/push. moby/moby#50176Packaging updates
Networking
docker network inspect --verbosecould sometimes crash the daemon (#49937).0.0.0.0and others are mapped to specific host addresses. moby/moby#50054network inspectresponse for an overlay network now reports thatEnableIPv4is true. moby/moby#50147"Mirrored". moby/moby#50155docker system pruneanddocker network pruneonly remove networks created by Docker. moby/moby#50154API
GET /images/jsonnow sets the value of theContainersfield for all images to the count of containers using the image. moby/moby#50146Deprecations
GET /images/{name}/jsonresponse are now deprecated and will be removed in v29.0. docker/cli#6129ExecOptions.Detach. This field is not used, and will be removed in a future release. moby/moby#50219IdentityMappingandIdentity.Chown. moby/moby#50210v28.2.2: 28.2.2Compare Source
28.2.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
docker build --pushto fail. This reverts the fix fordocker buildnot persisting overridden images as dangling. moby/moby#50105Networking
DOCKER-USERchain, do not add an explicitRETURNrule, allowing users to append as well as insert their own rules. Existing rules are not removed on upgrade, but it won't be replaced after a reboot. moby/moby#50098v28.2.1: 28.2.1Compare Source
28.2.1
Packaging updates
dockergroup/user on fresh installations. docker-ce-packaging#1209v28.2.0: 28.2.0Compare Source
28.2.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
{{.Platform}}as formatting option fordocker psto show the platform of the image the container is running. docker/cli#6042../) on bind mount sources when usingdocker run/createwith-v/--volumeor--mount type=bindoptions. docker/cli#4966docker info. docker/cli#6078docker image rm: add--platformoption to remove a variant from multi-platform images. docker/cli#6109DOCKER_BUILDKIT=1). moby/moby#49740Bug fixes and enhancements
fluentd-write-timeout), which enables specifying write timeouts for fluentd connections. moby/moby#49911DOCKER_AUTH_CONFIGfor the experimental--use-api-socketoption. docker/cli#6019docker execwaiting for 10 seconds if a non-existing user or group was specified. moby/moby#49868docker swarm initignoringcacertoption of--external-ca. docker/cli#5995~/.docker/config.json) if it was a relative symbolic link. docker/cli#5282--restart alwayspolicy using CDI devices failing to start on daemon restart. moby/moby#49990plugin does not implement PluginAddr interfaceerror for Swarm CSI drivers. moby/moby#49961docker loginerror messages for invalid options. docker/cli#6036listmount,statmount,lsm_get_self_attr,lsm_list_modules,lsm_set_self_attr,mseal,uretprobe,riscv_hwprobe,getxattrat,listxattrat,removexattrat, andsetxattrat. This prevents containers from receiving EPERM errors when using them. moby/moby#50077docker inspect: add shell completion, improve flag-description for--typeand improve validation. docker/cli#6052docker buildnot persisting overridden images as dangling. moby/moby#49702docker system dfreporting a negative reclaimable space amount. moby/moby#49707PUTrequests when pushing a multi-platform image. moby/moby#49949Packaging updates
docker-ceman-pages. docker/docker-ce-packaging#1203Networking
"com.docker.network.bridge.trusted_host_interfaces", accepting a colon-separated list of interface names. These interfaces have direct access to published ports on container IP addresses. moby/moby#49832"allow-direct-routing"to disable filtering of packets from outside the host addressed directly to containers. moby/moby#49832com.docker.network.enable_ipv4orcom.docker.network.enable_ipv6in inspect output if they have been overridden byEnableIPv4orEnableIPv6in the network create request. moby/moby#49866docker network inspect --verbosecould sometimes crash the daemon. moby/moby#49937API
1.50.DELETE /images/{name}now supports aplatformsquery parameter. It accepts an array of JSON-encoded OCI Platform objects, allowing for selecting a specific platforms to delete content for. moby/moby#49982GET /infonow includes aDiscoveredDevicesfield. This is an array ofDeviceInfoobjects, each providing details about a device discovered by a device driver. moby/moby#49980Go SDK
api/types/container: addContainerStateand constants for container state. moby/moby#49965api/types/container: changeSummary.Stateto aContainerState. moby/moby#49991api/types/container: defineHealthStatustype for health-status constants. moby/moby#49876api/types: deprecateBuildResult,ImageBuildOptions,ImageBuildOutput,ImageBuildResponse,BuilderVersion,BuilderV1, andBuilderBuildKiwhich were moved toapi/types/build. moby/moby#50025Deprecations
GET /images/{name}/jsonno longer returns the following fields:Config,Hostname,Domainname,AttachStdin,AttachStdout,AttachStderr,Tty,OpenStdin,StdinOnce,Image,NetworkDisabled(already omitted unless set),MacAddress(already omitted unless set),StopTimeout(already omitted unless set). These additional fields were included in the response due to an implementation detail but not part of the image's Configuration, were marked deprecated in API v1.46, and are now omitted. moby/moby#48457filepath.Rel(). moby/moby#49843BuildCachePruneOptionsin favor ofapi/types/builder.CachePruneOptions. moby/moby#50015BuildCachePruneReportin favor ofapi/types/builder.CachePruneReport. [api/types: move build cache types to api/types/build moby/moby#50015](https://redirecConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.